SAP FS-RBD Missing Authorization Check Vulnerability in IBS Module Allowing Privilege Escalation

A vulnerability exists in an IBS module of SAP FS-RBD, where an authenticated user with low privileges can exploit a missing authorization check. This flaw allows unauthorized access to perform actions beyond the user's intended permissions, leading to a low impact on integrity, with no effect on confidentiality or availability.

Impact

Exploitation of this vulnerability could result in unauthorized actions being performed, potentially altering data or system states in a way that undermines the integrity of the application.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically during the monthly SAP Security Patch Day.